Azure Compliance ControlsAzure Monitor
Log Analytics workspaces should prohibit ingestion that is not based on Azure Active Directory
This control checks whether `Log Analytics` workspaces block ingestion that is not based on `Azure Active Directory`. A compliant workspace should accept only data from sources that authenticate with `Azure Active Directory`.
What this control checks
Log Analytics Workspaces should block non-Azure Active Directory based ingestion
Framework mappings
The clauses this control is mapped to in each framework.
- 3.1.g Trails
Related controls
Tool mappings
Use these identifiers to cross-reference this control across tools, reports, and evidence.
- Compliance.tf Control:
log_analytics_workspace_block_non_azure_ingestion - Powerpipe Control:
azure_compliance.control.log_analytics_workspace_block_non_azure_ingestion
Last reviewed: 2026-10-13